PT-2016-4474
CVE-2016-0921
·
تاريخ النشر
2016-09-21
·
تاريخ التحديث
2017-07-30
الوصف من
CVSS 2.0
6.9
متوسطةالمقاييسAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
EMC Avamar Server versions prior to 7.3.0-233
Description
The issue concerns weak permissions for unspecified directories in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE), allowing local users to gain root access. This can be achieved by replacing a script with a Trojan horse program, enabling unauthorized access and control.
Recommendations
For versions prior to 7.3.0-233, update to version 7.3.0-233 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾